diff --git a/bpfloader/bpfloader.rc b/bpfloader/bpfloader.rc index 0d92cd8..1d6248e 100644 --- a/bpfloader/bpfloader.rc +++ b/bpfloader/bpfloader.rc @@ -27,6 +27,12 @@ on load_bpf_programs service bpfloader /system/bin/bpfloader capabilities CHOWN SYS_ADMIN NET_ADMIN + # The following group memberships are a workaround for lack of DAC_OVERRIDE + # and allow us to open (among other things) files that we created and are + # no longer root owned (due to CHOWN) but still have group read access to + # one of the following groups. This is not perfect, but a more correct + # solution requires significantly more effort to implement. + group root graphics network_stack net_admin net_bw_acct net_bw_stats net_raw system # # Set RLIMIT_MEMLOCK to 1GiB for bpfloader # diff --git a/libbpf_android/Loader.cpp b/libbpf_android/Loader.cpp index b93c8f0..7c5b5cb 100644 --- a/libbpf_android/Loader.cpp +++ b/libbpf_android/Loader.cpp @@ -30,9 +30,9 @@ #include #include -// This is BpfLoader v0.22 +// This is BpfLoader v0.23 #define BPFLOADER_VERSION_MAJOR 0u -#define BPFLOADER_VERSION_MINOR 22u +#define BPFLOADER_VERSION_MINOR 23u #define BPFLOADER_VERSION ((BPFLOADER_VERSION_MAJOR << 16) | BPFLOADER_VERSION_MINOR) #include "bpf/BpfUtils.h"